Role Summary:
Seeking a Senior AppSec Analyst with strong hands-on DAST/SAST and vulnerability management experience to perform dynamic security testing, identify vulnerabilities, and support development teams in integrating security into the SDLC/DevSecOps processes.
Key Responsibilities:
Perform DAST on web applications and APIs; identify and analyze security vulnerabilities.
Configure, tune, and maintain DAST tools such as Burp Suite, OWASP ZAP, or commercial scanners.
Integrate security testing into CI/CD and DevSecOps pipelines.
Conduct API security testing and assess authentication mechanisms including OAuth2, JWT, and SSO.
Provide detailed vulnerability reports and remediation guidance to development teams.
Support Secure-by-Design practices and secure coding initiatives.
Work closely with development and data platform teams to remediate application/data security issues.
Ensure applications meet security standards, policies, and compliance requirements.
Required Qualifications:
7+ years of Application Security experience with strong DAST expertise.
Strong hands-on experience with DAST/SAST and vulnerability assessment/remediation.
Expertise in OWASP Top 10 and web application security.
Experience automating security scans and integrating results into DevSecOps/CI/CD pipelines.
Programming/scripting experience in at least one language.
Relevant certifications such as OSWE, GWEB, Security+ are a plus.